What could cause commenting to suddenly not work for a particular channel if no changes to the configuration has been made? The person trying to comment gets the message "You are not authorized to perform this action". The EE version is 2.9.0 and there's been no upgrade between now and the last successful comment.
2 Answers
If you are developing locally (e.g. using the “localhost” domain) you may get this security error on comments submission. To test commenting during local development, try to set "Require IP Address and User Agent for Posting" to "No" in Admin -> Security and Privacy -> Security and Sessions.
-
This is on a live site that has been live for a long time and where comments from guests have worked fine before. Commented Jan 16, 2015 at 14:02
The "You are not authorized to perform this action" error can occur under these two situations (in addition to other situations too):
When EE determines that a posted comment is a duplicate. So if you keep posting a comment with "test" as the copy, EE will trigger the error.
When a person submits a comment and then uses their back button to post a second comment.
-
It definitely wasn't 2. and I tested again to rule out 1. and it doesn't seem to be that either as it doesn't go through no matter what I write. Commented Feb 20, 2015 at 9:56
-
Check your config.php file... Do you see a setting for "secure_forms"? What is it set to?– Anna_MediaGirl ♦Commented Feb 20, 2015 at 15:24
-
I don't seem to have a setting for secure_forms defined, no. Commented Feb 21, 2015 at 10:43
-
-
Do I need to do anything after editing config.php to make sure it takes effect? If not, it didn't solve it, still getting the same error. Commented Feb 21, 2015 at 22:46